Strange SSL Behavior

[autoace]

Installed 139H and have it configured for SSL to be enabled for admin area. When I go to the login page, SSL is on, and when I get to the admin home page its on, but then any other page I go to in admin area does not have SSL on and then when I log off, SSL is back on again...

Is that some new behavior for zc139h or is something off here?

[schoolboy]

In configure.php have you told both the HTTP and the HTTPS servers to be SSL?

It is generally better not to have SSL running across the whole site. SSL has no value for site/server security. All it does is encrypt data while in transit.

[nigelt74]

From the tutorials

NOTE: As of v1.3.x, the Admin area can only secure the "login" page via SSL unless you set the HTTP_SERVER in your "admin/includes/configure.php" to an SSL URL, in which case the entire admin area will be treated as SSL rather than only selected relevant pages. This will be changing during the admin-rewrite phase scheduled for completion sometime after Zen Cart v2.0 is released.

so basically if you want your entire admin to be ssl set the HTTP_SERVER in

admin/includes/configure.php

to your ssl link

Only do the admin like that, not your store/includes/configure.php

[autoace]

Got it thanks.